2 Show AppArmor status

The aa-status shows AppArmor status. Enforce mode blocks unallowed operation. Complain mode does not unallowed operation but reports to log file. For example, /sbin/dhclient's behavior is
limited by AppArmor (AppArmor is path based MAC). And not listed path here are not limited by AppArmor.